This series is mostly cleanup and fixing bugs that have crept in; see
individual patch descriptions for details.
In their present state, these patches require a recompile of existing
XSM policy due to the changes in initial SIDs and permissions. If
backwards compatability with older policy (or newer policy used with
older hypervisors) is needed, the definitions for old permissions could
be left in by reverting the header file changes in #2 and not applying
#7.
[PATCH 1/8] flask: Fix policy build with new checkpolicy
[PATCH 2/8] xsm: remove unused xsm_assign_vector check
[PATCH 3/8] xsm: Revert "Fix xsm_mmu_* and xsm_update_va_mapping
[PATCH 4/8] xsm: always allow setting non-present PTEs
[PATCH 5/8] xsm: Expand I/O resource hooks
[PATCH 6/8] xsm: rename security_pirq_sid to security_irq_sid
[PATCH 7/8] xsm: clean up initial SIDs
[PATCH 8/8] flask: Add flask-label-pci tool
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel
individual patch descriptions for details.
In their present state, these patches require a recompile of existing
XSM policy due to the changes in initial SIDs and permissions. If
backwards compatability with older policy (or newer policy used with
older hypervisors) is needed, the definitions for old permissions could
be left in by reverting the header file changes in #2 and not applying
#7.
[PATCH 1/8] flask: Fix policy build with new checkpolicy
[PATCH 2/8] xsm: remove unused xsm_assign_vector check
[PATCH 3/8] xsm: Revert "Fix xsm_mmu_* and xsm_update_va_mapping
[PATCH 4/8] xsm: always allow setting non-present PTEs
[PATCH 5/8] xsm: Expand I/O resource hooks
[PATCH 6/8] xsm: rename security_pirq_sid to security_irq_sid
[PATCH 7/8] xsm: clean up initial SIDs
[PATCH 8/8] flask: Add flask-label-pci tool
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel